Remove 2024 Remove Document Remove Financial Services Remove Risk
article thumbnail

GUEST ESSAY: Why internal IT teams are ill-equipped to adequately address cyber risks

The Last Watchdog

Every industry is dealing with a myriad of cyber threats in 2024. Regulatory overload Firms in the financial services industry are staring down the bottom of the regulatory barrel coming into 2024. It’s a tale as old as the first computer. The list goes on.

Risk 234
article thumbnail

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action

Thales Cloud Protection & Licensing

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. Shadow APIs Fuel Data Leakage Undiscovered or poorly documented APIs increase the attack surface.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

NYDFS releases major update to Part 500 cybersecurity requirements for financial services companies

Data Protection Report

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. Additional changes to required policies and procedures will not begin to take effect until April 2024 and rolling thereafter.

article thumbnail

Risk Management under the DORA Regulation

IT Governance

Perhaps even more concerning to EU lawmakers is how dependent society at large is on banking and other financial services. In turn, financial institutions heavily depend on ICT to be able to provide those services to begin with. That really shouldn’t surprise us – these are lucrative targets for cyber criminals.

Risk 104
article thumbnail

$8 million penalty to NYDFS – and another case of over-retention

Data Protection Report

2024 was not a happy new year for Genesis Global Trading, Inc. (“GGT”). Cybersecurity Regulation NYDFS found a number of issues with respect to GGT’s lack of compliance with the cybersecurity regulation, starting with the required risk assessment. This post will focus on the cybersecurity regulation issues. (For

article thumbnail

FCA sets out plans to make Big Tech a priority and provides update on its approach to AI

Data Protection Report

On 22 April 2024, the Financial Conduct Authority ( FCA ) published a speech by its chief executive, Nikhil Rathi, entitled ‘Navigating the UK’s Digital Regulation Landscape: Where are we headed?’. The FCA also sets out its next steps.

article thumbnail

The Clock is Ticking for PCI DSS 4.0 Compliance

Thales Cloud Protection & Licensing

According to the 2022 Thales Data Threat Report – Financial Services Edition , 52% of U.S. financial services organizations report that they have experienced a data breach in the past. was released on March 31, 2022, and before we know it, businesses will face the compliance deadline of March 31, 2024.